Google has rewarded a Uruguayan student with $10,000 after he exposed a security flaw that could allow hackers to access sensitive data. Ezequiel Pereira discovered the vulnerability in Google’s App Engine server after changing the Host header in requests to the server using Burp. The high-school student explained in a blog post, “I was bored, so … More Google pays $10,000 for student’s bug
Should you really be clicking on those links you just received in your email? Despite all the headlines about zero-day threats and state-sponsored attacks, the rather less dramatic truth is that the majority of security incidents start with a user simply clicking on a malicious link or opening a dangerous attachment – threats that we’ve … More Gmail now warns iOS users about suspicious links in fight against phishing threats
Recently, many people received a phishing email from a mailinator.com address that was attached to a malicious Google doc. It seemed to be targeting journalists, as well as yours truly. Once the link is clicked, a user is directed to the Google login page, asking for a username and password. Except, the page is not … More Beware Google Docs phishing attack
Based on ESET’s notice, Google has removed another malicious app from its official Android app store. It had received 100,000-500,000 downloads since November 2016. Unlike typical downloaders, ransomware and similar nasty stuff, this app – named F11 – did not contain any harmful code. Instead, it relied purely on social engineering, tricking users into paying … More Don’t pay for what is for free: Malicious Adobe Flash Player app found on Google Play
The number of websites compromised by cybercriminals during 2016 was 32% higher than the previous year, according to Google. The tech giant added that this spiral of cyberattacks is unlikely to lose momentum anytime soon, as more websites become “outdated” and cyberattackers “more aggressive”. One area of weakness identified by Google has been the slow … More Google: More websites failing victim to cybercriminals
ESET Ireland 